Controller
Viro Vet Diagnostik GmbH
Represented by: Prof. Dr. F. Weber
Schubertstr. 81
35392 Gießen
Germany
E-mail: [email protected]
Phone: 0049 641 99 38350 Fax: 0049 641 99 38359
Purposes and Legal Bases of Data Processing
2.1 Performance of Diagnostic Examinations
We process personal data, including animal health data, in order to fulfil the diagnostic contract and to provide the requested laboratory services.
Legal bases
- Art. 6(1)(b) GDPR (performance of a contract)
- Art. 6(1)(c) GDPR (legal obligations)
- Art. 9(2)(h) GDPR (processing of health data for medical purposes)
Categories of data processed
- Animal data: name, age, sex, identification, vaccination status, medical history, test results, diagnoses
- Submitter data (veterinarian/physician): name, address, contact details, bank details
- In specific cases: data of the animal owner (e.g., for production of autogenous vaccines, or certificates)
Without this information, proper diagnostic processing is not possible.
2.2 Newsletter
When you subscribe to our newsletter, we process your email address, language, registration source, consent version, and the times at which the confirmation email was sent and confirmed.
Legal basis: Art. 6(1)(a) GDPR (consent).
Your subscription becomes active only after confirmation through a time-limited link (double opt-in). Unconfirmed subscriptions are deleted after 14 days. Confirmed subscriptions are stored until consent is withdrawn, unless statutory retention obligations apply. We do not store an IP address or create a usage profile for newsletter subscriptions.
Data Processing When Using Our Website
When you access our website, technically necessary access data is processed.
Access log data collected
- IP address of the requesting device
- Date and time of access
- File accessed
- Access status
- Amount of data transferred
- Access method used
Purposes of processing
- Ensuring technical operation
- Preventing unauthorized access
- Error analysis
Retention period
- Non-anonymized log data: 2 months, then deleted
- Anonymized data: statistical evaluation
Analytics tool: We use Fathom Analytics (GDPR-compliant, no cookies, no personal profiles). IP addresses are anonymized.
Cookies: We use only technically necessary cookies for session management, protection against abusive requests and to remember your language choice. We do not use analytics or marketing cookies.
Use of the Information Provided
We use personal data exclusively for:
- Processing diagnostic orders
- Preparing reports and certificates
- Invoicing
- Fulfilling statutory reporting obligations
- Internal statistical evaluations (anonymized only)
Disclosure of Personal Data
Data is only disclosed if required by law or if you have given consent.
Possible recipients
- Authorities under the Animal Health Act or Infection Protection Act
- Border control or entry authorities (for certificates)
- Tax advisors and payment service providers
- Official bodies with authorized access to certificate data (authentication via animal ID and diary number)
No data is transferred to other third parties.
Retention Period
Personal data is stored only as long as necessary to perform the diagnostic examination.
Statutory retention requirement: At least 10 years after completion of the examination (Art. 6(1)(c) GDPR in conjunction with professional regulations).
Data is stored exclusively on servers within the EU.
Rights of Data Subjects
Under Art. 12–23 GDPR, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
Right to lodge a complaint
The Hessian Commissioner for Data Protection and Freedom of Information
Prof. Dr. Alexander Roßnagel
Wilhelmstr. 7
65185 Wiesbaden
Phone: 0611/1408 0
E-mail: [email protected]
Data Security
We implement technical and organizational measures to protect personal data from unauthorized access, loss, or misuse. However, absolute security cannot be guaranteed.
Data protection breaches are reported to the supervisory authority in accordance with Art. 33 GDPR.
Changes to This Privacy Policy
This policy will be updated if legal requirements or internal processes change. The current version is published on our website.